From patchwork Mon Jun 28 14:47:03 2010 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: TJ X-Patchwork-Id: 57147 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.gnu.org (lists.gnu.org [199.232.76.165]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by ozlabs.org (Postfix) with ESMTPS id 581C5B6EEB for ; Tue, 29 Jun 2010 00:47:36 +1000 (EST) Received: from localhost ([127.0.0.1]:49214 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1OTFcL-0002ZP-At for incoming@patchwork.ozlabs.org; Mon, 28 Jun 2010 10:47:25 -0400 Received: from [140.186.70.92] (port=48120 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1OTFbm-0002ZK-AU for qemu-devel@nongnu.org; Mon, 28 Jun 2010 10:46:51 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1OTFbk-0003fE-QN for qemu-devel@nongnu.org; Mon, 28 Jun 2010 10:46:50 -0400 Received: from mail-qw0-f45.google.com ([209.85.216.45]:44958) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OTFbk-0003f7-K0 for qemu-devel@nongnu.org; Mon, 28 Jun 2010 10:46:48 -0400 Received: by qwg8 with SMTP id 8so1781449qwg.4 for ; Mon, 28 Jun 2010 07:46:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:cc:subject:content-type :content-transfer-encoding; bh=7sSfkgmsyGYW9geBafp1lrqq69sOU+DYO84CWxLTOFs=; b=t46/0txuel3sZcSS9OiiSpw9U6MI39cHaWoqThLLZzTbyZwVVenTEmlVsAhNAnqMRI xOSCuhw4P7NRE0xdANWqQKDHtyNUviPQYK30Ht6PyC21uYqOiD3HvcpSOtqQzRPI21S8 3RnvDykJdzj0HimzJR/JD1qau0TkjhTDsz0ns= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :content-type:content-transfer-encoding; b=dnoLBSBa3hpTGoHVUIXdNQMhQb+DLbi3bZlRBBAsEj6nPLYurnoXmFs90EJ1t757XU sR8yWIDAxzdtZpoLjE/Eaxc94ZnOApWmEWSv5+MkAmbMe9++4hSVJtNg1J/bBc+a5UQR 3ABFRm801+cmFZAsLGagES0ZTeXhL2aOlF0Gs= Received: by 10.224.108.69 with SMTP id e5mr3360722qap.215.1277736407794; Mon, 28 Jun 2010 07:46:47 -0700 (PDT) Received: from [192.168.2.80] ([216.7.150.90]) by mx.google.com with ESMTPS id m29sm86075557qck.40.2010.06.28.07.46.44 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 28 Jun 2010 07:46:47 -0700 (PDT) Message-ID: <4C28B5E7.7020404@gmail.com> Date: Mon, 28 Jun 2010 10:47:03 -0400 From: TJ User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.10) Gecko/20100624 Thunderbird/3.0.5 ThunderBrowse/3.2.8.1 MIME-Version: 1.0 To: "qemu-devel@nongnu.org" X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) Cc: Gianni Tedesco Subject: [Qemu-devel] [PATCH v2] Guest OS hangs on usb_add X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org Errors-To: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org This is a small patch to sligtly "intelligentify" usb device and config descriptor parsing and to handle bug with certain usb device (URC MX-950) reporting device desriptor length as 0x18 instead of 18 with added vendor_id/product_id check --- hw/usb.h | 5 +++++ usb-linux.c | 37 ++++++++++++++++++++++--------------- 2 files changed, 27 insertions(+), 15 deletions(-) } if (i >= dev->descr_len) { diff --git a/hw/usb.h b/hw/usb.h index 00d2802..5c3528f 100644 --- a/hw/usb.h +++ b/hw/usb.h @@ -117,6 +117,11 @@ #define USB_DT_INTERFACE 0x04 #define USB_DT_ENDPOINT 0x05 +#define USB_DT_DEVICE_LEN 18 +#define USB_DT_CONFIG_LEN 9 +#define USB_DT_INTERFACE_LEN 9 +#define USB_DT_ENDPOINT_LEN 7 + #define USB_ENDPOINT_XFER_CONTROL 0 #define USB_ENDPOINT_XFER_ISOC 1 #define USB_ENDPOINT_XFER_BULK 2 diff --git a/usb-linux.c b/usb-linux.c index 88273ff..2ac6562 100644 --- a/usb-linux.c +++ b/usb-linux.c @@ -288,7 +288,7 @@ static void async_cancel(USBPacket *unused, void *opaque) static int usb_host_claim_interfaces(USBHostDevice *dev, int configuration) { - int dev_descr_len, config_descr_len; + int dev_descr_len, config_descr_total_len; int interface, nb_interfaces; int ret, i; @@ -297,32 +297,39 @@ static int usb_host_claim_interfaces(USBHostDevice *dev, int configuration) DPRINTF("husb: claiming interfaces. config %d\n", configuration); - i = 0; dev_descr_len = dev->descr[0]; - if (dev_descr_len > dev->descr_len) { + if (dev_descr_len == 0x18 && dev->descr[ 8] == 0x47 && dev->descr[ 9] == 0x46 + && dev->descr[10] == 0x00 && dev->descr[11] == 0x30) + dev_descr_len = USB_DT_DEVICE_LEN; /* for buggy MX-950 remote reporting len in hex */ + + if (dev_descr_len > dev->descr_len || dev_descr_len < USB_DT_DEVICE_LEN || dev->descr[1] != USB_DT_DEVICE) { + fprintf(stderr, "husb: invalid device descriptor\n"); goto fail; } - i += dev_descr_len; - while (i < dev->descr_len) { + for (i = dev_descr_len; i < dev->descr_len; ) { DPRINTF("husb: i is %d, descr_len is %d, dl %d, dt %d\n", i, dev->descr_len, dev->descr[i], dev->descr[i+1]); - if (dev->descr[i+1] != USB_DT_CONFIG) { - i += dev->descr[i]; - continue; + if (dev->descr[i] < 2) { + fprintf(stderr, "husb: invalid descriptor\n"); + goto fail; } - config_descr_len = dev->descr[i]; + if (dev->descr[i+1] == USB_DT_CONFIG) { + config_descr_total_len = dev->descr[i+2] + (dev->descr[i+3] << 8); - printf("husb: config #%d need %d\n", dev->descr[i + 5], configuration); + printf("husb: config #%d need %d\n", dev->descr[i + 5], configuration); - if (configuration < 0 || configuration == dev->descr[i + 5]) { - configuration = dev->descr[i + 5]; - break; - } + if (configuration < 0 || configuration == dev->descr[i + 5]) { + configuration = dev->descr[i + 5]; + break; + } - i += config_descr_len; + i += config_descr_total_len; + } + else + i += dev->descr[i];